I am concerned about the potential attack surface exposed by JavaScript typed arrays as a means of performing rowhammer attacks.
Is it possible to disable (via official means or otherwise) typed arrays in firefox?
Add a comment
|
1 Answer
There are no means to disable typed arrays in the browser. Much like you can't disable the use of 'img src' or 'a href' tags in the code.
What you can do however is prevent the execution of javascript via this method.
In Firefox
- typed 'about:config' in the address bar
- Click "I accept the risk" on the dialogue box that comes up
- Type 'javascript.enabled' in the search section
- Right click on 'javascript.enabled' and select 'Toggle'
- You can then close the tab.
Firefox will not load javascript from then on.
-
Unfortunately, client security is not a concern for site developpers, and many site can simply not be used without javascript. IMHO it is a shame, but life is like that... Feb 23, 2017 at 10:19
-
@SergeBallesta yeah man. That's why there's check and balances to minimise the risk. Guides like OWASP top 10, OWASP ASVS, Secure Coding Best Practices. With the guides, there's really no excuse not to follow. Feb 23, 2017 at 10:33